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METHOD AND APPARATUS FOR SECURITY IN A DATA 
PROCESSING SYSTEM 

BACKGROUND 

Field 

[1000] The present invention relates to data processing systems generally 
and specifically, to methods and apparatus for security in a data processing 
system. 

Background 

[1001] Security in data processing and information systems, including 
communications systems, contributes to accountability, fairness, accuracy, 
confidentiality, operability, as well as a plethora of other desired criteria. 
Encryption, or the general field of cryptography, is used in electronic commerce, 
wireless communications, broadcasting, and has an unlimited range of 
applications. In electronic commerce, encryption is used to prevent fraud in and 
to verify financial transactions. In data processing systems, encryption is used 
to verify a participant's identity. Encryption is also used to prevent hacking, 
protect Web pages, and prevent access to confidential documents, as well as a 
variety of other security measures. 

[1002] Systems employing cryptography, often referred to as cryptosystems, 
can be partitioned into symmetric cryptosystems and asymmetric 
cryptosystems. A symmetric encryption system uses a same key (i.e., the 
secret key) to encrypt and decrypt a message. Whereas an asymmetric 
encryption system uses a first key (i.e., the public key) to encrypt a message 
and uses a second, different key (i.e., the private key) to decrypt it. Asymmetric 
cryptosystems are also called public key cryptosystems. A problem exists in 
symmetric cryptosystems in the secure provision of the secret key from a 
sender to a recipient. Further, a problem exists when keys or other encryption 
mechanisms are updated frequently. In a data processing system, methods of 
securely updating keys incur additional processing time, memory storage and 
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Other processing overhead. In a wireless communication system, updating keys 
uses valuable bandwidth othenwise available for transmission. 
[1003] The prior art does not provide a method for updating keys to a large 
group of mobile stations in order that they may access an encrypted broadcast. 
There is a need, therefore, for a secure and efficient method of updating keys in 
a data processing system. Further, there is a need for a secure and efficient 
method of updating keys in a wireless communication system. 

SUMMARY 

[1004] Embodiments disclosed herein address the above stated needs by 
providing a method for security in a data processing system. In one aspect, a 
method for secure transmissions includes determining a short term key for a 
message for transmission, wherein the short term key has a short term key 
identifier, determining an access key for the message, wherein the access key 
has an access key identifier, encrypting the message with the access key, 
forming an Internet protocol header comprising the short term key identifier, and 
transmitting the encrypted message with the Internet protocol header. 
[1005] In another aspect, in a wireless communication system supporting a 
broadcast service option, an infrastructure element includes a receive circuitry, 
a user identification unit, operative to recover a short-time key for decrypting a 
broadcast message, and a mobile equipment unit adapted to apply the short- 
time key for decrypting the broadcast message. The user identification unit 
including a processing unit operative to decrypt key information. The mobile 
equipment unit including a memory storage unit for storing a plurality of short 
term keys and short term key identifiers. 

[1006] In still another aspect, a digital signal storage device includes a first 
set of instructions for receiving a short term key identifier specific to a 
transmission, the short term key identifier corresponding to a short term key, a 
second set of instructions for determining an access key based on the short 
term key identifier, a third set of instructions for encrypting the short term key 
identifier with the access key to recover the short term key, and a fourth set of 
instructions for decrypting the transmission using the short term key. 



wo 03/032573 



3 



PCT/US02/32054 



BRIEF DESCRIPTION OF THE DRAWINGS 



[1007] FIG. 1A is a diagram of a cryptosystem. 

[1008] FIG. 1 B is a diagram of a symmetric cryptosystem. 

[1 009] FIG. 1 C is a diagram of an asymmetric cryptosystem. 

[1 01 0] FIG. 1 D is a diagram of a PGP encryption system. 

[1011] FIG. 1 E is a diagram of a PGP decryption system. 

[1012] FIG. 2 is a diagram of a spread spectrum communication system that 

supports a number of users. 

[1013] FIG. 3 is a block diagram of the communication system supporting 
broadcast transmissions. 

[1014] FIG. 4 is a block diagram of a mobile station in a wireless 
communication system. 

[1015] FIGs. 5A and 5B illustrate models describing the updating of keys 

within a mobile station used for controlling broadcast access. 

[1016] FIG. 6 is a model describing cryptographic operations within a DIM. 

[1017] FIGs. 7A-7D illustrate a method of implementing security encryption 

in a wireless communication system supporting broadcast transmissions. 

[1018] FIG. 7E is a timing diagram of key update periods of a security option 

in a wireless communication system supporting broadcast transmissions. 

[1019] FIGs. 8A-8D illustrate application of a security encryption method in a 

wireless communication system supporting broadcast transmissions. 

[1020] FIG. 9A illustrates the format of an IPSec packet for an Internet 

Protocol transmission. 

[1021] FIG. 90 illustrates a Security Association Identifier or SPI as 
applicable to an IPSec packet. 

[1022] FIG. 90 illustrates a memory storage device for storing SPI 
information in a mobile station. 

[1023] FIG. 9D illustrates a memory storage device for storing Broadcast 
Access Keys (BAKs) in a mobile station. 
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[1024] FlGs. 10 and 11 illustrate a method for providing security for a 
broadcast message in a wireless communication system. 
[1025] FIG. 12A illustrates a Security Association Identifier or SPI as 
applicable to an IPSec pacl<et. 

[1026] FIG. 12B illustrates a memory storage device for storing SPI 
information in a mobile station. 

[1027] FIG. 13 and 14 illustrate a method for providing security for a 
broadcast message in a wireless communication system. 

DETAILED DESCRIPTION 

[1028] The word "exemplary" is used exclusively herein to mean "serving as 
an example, instance, or illustration." Any embodiment described herein as 
"exemplary" is not necessarily to be construed as preferred or advantageous 
over other embodiments. 

[1029] Wireless communication systems are widely deployed to provide 
various types of communication such as voice, data, and so on. These systems 
may be based on code division multiple access (CDMA), time division multiple 
access (TDMA), or some other modulation techniques. A CDIVIA system 
provides certain advantages over other types of system, including increased 
system capacity. 

[1 030] A system may be designed to support one or more standards such as 
the "TIA/EIA/IS-95-B Mobile Station-Base Station Compatibility Standard for 
Dual-Mode Wideband Spread Spectrum Cellular System" referred to herein as 
the IS-95 standard, the standard offered by a consortium named "3rd 
Generation Partnership Project" referred to herein as 3GPP, and embodied in a 
set of documents including Document Nos. 3G TS 25.211, 3G TS 25.212, 3G 
TS 25.213, and 3G TS 25.214, 3G TS 25.302, referred to herein as the W- 
CDMA standard, the standard offered by a consortium named "3rd Generation 
Partnership Project 2" referred to herein as 3GPP2, and TR-45.5 referred to 
herein as the cdma2000 standard, formerly called IS-2000 MC. The standards 
cited hereinabove are hereby expressly incorporated herein by reference. 
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[1031] Each standard specifically defines tlie processing of data for 
transmission from base station to mobile, and vice versa. As an exemplary 
embodiment the following discussion considers a spread-spectrum 
communication system consistent with cdma2000 systems. Alternate 
embodiments may incorporate another standard/system. Still other 
embodiments may apply the security methods disclosed herein to any type of 
data processing system using a cryptosystem. 

[1032] A cryptosystem is a method of disguising messages that allows a 
specific group of users to extract the message. FIG. 1A illustrates a basic 
cryptosystem 10. Cryptography is the art of creating and using cryptosystems. 
Cryptanalysis is the art of breaking cryptosystems, i.e., receiving and 
understanding the message when you are not within the specific group of users 
allowed access to the message. The original message is referred to as a 
plaintext message or plaintext. The encrypted message is called a ciphertext, 
wherein encryption includes any means to convert plaintext into ciphertext. 
Decryption includes any means to convert ciphertext into plaintext, i.e., recover 
the original message. As illustrated in FIG. 1A, the plaintext message is 
encrypted to form a ciphertext. The ciphertext is then received and decrypted to 
recover the plaintext. While the terms plaintext and ciphertext generally refer to 
data, the concepts of encryption may be applied to any digital information, 
including audio and video data presented in digital form. While the description 
of the invention provided herein uses the term plaintext and ciphertext 
consistent with the art of cryptography, these terms do not exclude other forms 
of digital communications. 

[1033] A cryptosystem is based on secrets. A group of entities shares a 
secret if an entity outside this group cannot obtain the secret without 
significantly large amount of resources. 

[1034] A cryptosystem may be a collection of algorithms, wherein each 
algorithm is labeled and the labels are called keys. A symmetric encryption 
system, often referred to as a cryptosystem, uses a same key (i.e., the secret 
key) to encrypt and decrypt a message. A symmetric encryption system 20 is 
illustrated in FIG. IB, wherein both the encryption and decryption utilize a same 
private key. 
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[1035] In contrast, an asymmetric encryption system uses a first i^ey (e.g., 
tlie public key) to encrypt a message and uses a different key (e.g., the private 
key) to decrypt it. FIG. 1C illustrates an asymmetric encryption system 30 
wherein one key is provided for encryption and a second key for decryption. 
Asymmetric cryptosystems are also called public /cey cryptosystems. The public 
key is published and available for encrypting any message, however, only the 
private key may be used to decrypt the message encrypted with the public key. 
[1036] A problem exists in symmetric cryptosystems in the secure provision 
of the secret key from a sender to a recipient. In one solution, a courier may be 
used to provide the information, or a more efficient and reliable solution may be 
to use a public key cryptosystem, such as a public-key cryptosystem defined by 
Rivest, Shamir, and Adieman (RSA) which is discussed hereinbelow. The RSA 
system is used in the popular security tool referred to as Pretty Good Privacy 
(PQP)_ which is further detailed hereinbelow. For instance, an originally 
recorded cryptosystem altered letters in a plaintext by shifting each letter by n in 
the alphabet, wherein r? is a predetermined constant integer value. In such a 
scheme, an "A" is replaced with a "D," etc., wherein a given encryption scheme 
may incorporate several different values of n. In this encryption scheme "rf' is 
the key. Intended recipients are provided the encryption scheme prior to receipt 
of a ciphertext. In this way, only those knowing the key should be able to 
decrypt the ciphertext to recover the plaintext. However, by calculating the key 
with knowledge of encryption, unintended parties may be able to intercept and 
decrypt the ciphertext, creating a security problem. 

[1037] More complicated and sophisticated cryptosystems employ strategic 
keys that deter interception and decryption from unintended parties. A classic 
cryptosystem employs encryption functions E and decryption functions D such 
that: 

D_K(E_K(P)) = P, for any plaintext P. (1 ) 

[1038] In a public-key cryptosystem, E_K is easily computed from a known 
^>ublic key" 7 which in turn is computed from K. The public key Vis published, 
so that anyone can encrypt messages. The decryption function D_K is 
computed from public key V, but only with knowledge of a private key K. 
Without the private key Kan unintended recipient may not decrypt the ciphertext 
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so generated. In this way only the recipient who generated K can decrypt 
messages. 

[1039] RSA is a public-l<ey cryptosystem defined by Rivest, Shamir, and 
Adieman, wherein, for example, plaintexts consider positive integers up to 2^^^. 
Keys are quadruples {p,q,e,d), with p given as a 256-bit prime number, q as a 
258-bit prime number, and of and e large numbers with (de - 1) divisible by (p- 
1 )(q-1 ). Further, define the encryption function as: 

E_K(P) = mod pg, D_K(C) = mod pq. (2) 
[1040] While, E_K is easily computed from the pair {pq,e), there is no known 
simple way to compute D_K from the pair {pq,e). Therefore, the recipient that 
generates K can publish {pq,e). It is possible to send a secret message to the 
recipient as he is the one able to read the message. 

[1041] PGP combines features from symmetric and asymmetric encryption. 
FIGs. 1D and IE illustrate a PGP cryptosystem 50, wherein a plaintext message 
is encrypted and recovered. In FIG. 1 D, the plaintext message is compressed 
to save modem transmission time and disk space. Compression strengthens 
cryptographic security by adding another level of translation to the encrypting 
and decrypting processing. Most cryptanalysis techniques exploit patterns 
found in the plaintext to crack the cipher. Compression reduces these patterns 
in the plaintext, thereby enhancing resistance to cryptanalysis. Note that one 
embodiment does not compress: plaintext, or other messages that are too short 
to compress, or which don't compress well. 

[1042] PGP then creates a session key, which is a one-time-only secret key. 
This key is a random number that may be generated from any random event(s), 
such as random movements of a computer mouse and/or the keystrokes while 
typing. The session key works with a secure encryption algorithm to encrypt the 
plaintext, resulting in ciphertext. Once the data is encrypted, the session key is 
then encrypted to the recipient's public key. The public key-encrypted session 
key is transmitted along with the ciphertext to the recipient. 
[1043] For decryption, as illustrated in FIG. 1E, the recipient's copy of PGP 
uses a private key to recover the temporary session key, which PGP then uses 
to decrypt the conventionally encrypted ciphertext. The combination of 
encryption methods takes advantage of the convenience of public key 



wo 03/032573 



8 



PCT/US02/32054 



encryption and the speed of symmetric encryption. Symmetric encryption Is 
generally much faster than public key encryption. Public key encryption in turn 
provides a solution to key distribution and data transmission issues. In 
combination, performance and key distribution are improved without any 
sacrifice in security. 

[1044] A key is a value that works with a cryptographic algorithm to produce 
a specific ciphertext. Keys are basically very large numbers. Key size is 
measured in bits. In public key cryptography, security increases with key size, 
however, public key size and the symmetric encryption private key size are not 
generally related. While the public and private keys are mathematically related, 
a difficulty arises in deriving a private key given only a public key. Deriving the 
private key is possible given enough time and computing power, making the 
selection of key size an important security issue. The optimal goal is to 
maximize the size of the key for security concerns, while minimizing key size to 
facilitate quick processing. Larger keys will be cryptographically secure for a 
longer period of time. An additional consideration is the expected interceptor, 
specifically: 1) what is the importance of a message to a third party; and 2) how 
much resource will a third party have to decrypt the message. 
[1045] Note that keys are stored in encrypted form. PGP specifically stores 
keys in two files: one for public keys and one for private keys. These files are 
called keyrings. In application, a PGP encryption system adds the public keys 
of target recipients to the sender's public keyring. The sender's private keys are 
stored on the sender's private keyring. 

[1046] As discussed in the examples given hereinabove, the method of 
distributing the keys used for encryption and decryption can be complicated. 
The ''key exchange problem" involves first ensuring that keys are exchanged 
such that both the sender and receiver can perform encryption and decryption, 
respectively, and for bi-directional communication, such that the sender and 
receiver can both encrypt and decrypt messages. Further, it is desired that key 
exchange be performed so as to preclude interception by a third and 
unintended party. 

[1047] Finally, an additional consideration is authentication, providing 
' assurance to the receiver that a message was encrypted by an intended sender 
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and not a third party. In a private key exciiange system, tlie l<eys are 
exchanged secretly providing improved security upon successful key exchange 
and valid authentication. Note that the private key encryption scheme implicitly 
provides authentication. The underlying assumption in a private key 
cryptosystem is that only the intended sender will have the key capable of 
encrypting messages delivered to the intended receiver. While public-key 
cryptographic methods solve a critical aspect of the ^key-exchange problem', 
specifically their resistance to analysis even with the presence a passive 
eavesdropper during exchange of keys, still, they do not solve all problems 
associated with key exchange. In particular, since the keys are considered 
'public knowledge' (particularly with RSA), some other mechanism is desired to 
provide authentication. Authentication is desired as possession of keys alone, 
while sufficient to encrypt messages, is no evidence of a particular unique 
identity of the sender, nor is possession of a corresponding decryption key by 
itself sufficient to establish the identity of the recipient. 

[1048] One solution is to develop a key distribution mechanism that assures 
that listed keys are actually those of the given entities, sometimes called a 
trusted authority, certificate authority, or third part escrow agent. The authority 
typically does not actually generate keys, but does ensure that the lists of keys 
and associated identities kept and advertised for reference by senders and 
receivers are correct and not compromised. Another method relies on users to 
distribute and track each other's keys and trust in an informal, distributed 
fashion. Under RSA, if a user wishes to send evidence of their identity in 
addition to an encrypted message, a signature is encrypted with the private key. 
The receiver can use the RSA algorithm in reverse to verify that the information 
decrypts, such that only the sender could have encrypted the plaintext by use of 
the secret key. Typically the encrypted 'signature' is a 'message digest' that 
comprises a unique mathematical 'summary' of the secret message (if the 
signature were static across multiple messages, once known previous receivers 
could use it falsely). In this way, theoretically, only the sender of the message 
could generate a valid signature for that message, thereby authenticating it for 
the receiver. 
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[1049] A message digest is often computed using a cryptographic hasii 
function. A cryptographic hash function computes a value (with a fixed number 
of bits) from any input, regardless of the length of the input. One property of a 
cryptographic hash function is this: given an output value, it is computationally 
difficult to determine an input that will result in that output. An example of a 
cryptographic hash function is SHA-1 as described in "Secure Hash Standard," 
FIPS PUB 180-1, promulgated by the Federal Information Processing 
Standards Publications (FIPS PUBS) and issued by the National Institute of 
Standards and Technology. 

[1050] FIG. 2 serves as an example of a communications system 100 that 
supports a number of users and is capable of Implementing at least some 
aspects and embodiments of the invention. Any of a variety of algorithms and 
methods may be used to schedule transmissions in system 100. System 100 
provides communication for a number of cells 102A through 102G, each of 
which is serviced by a corresponding base station 104A through 104G, 
respectively. In the exemplary embodiment, some of base stations 104 have 
multiple receive antennas and others have only one receive antenna. Similarly, 
some of base stations 104 have multiple transmit antennas, and others have 
single transmit antennas. There are no restrictions on the combinations of 
transmit antennas and receive antennas. Therefore, it is possible for a base 
station 104 to have multiple transmit antennas and a single receive antenna, or 
to have multiple receive antennas and a single transmit antenna, or to have 
both single or multiple transmit and receive antennas. 

[1051] Terminals 106 in the coverage area may be fixed (i.e., stationary) or 
mobile. As shown in FIG. 2, various tenninals 106 are dispersed throughout 
the system. Each terminal 106 communicates with at least one and possibly 
more base stations 104 on the downlink and uplink at any given moment 
depending on, for example, whether soft handoff is employed or whether the 
terminal is designed and operated to (concurrently or sequentially) receive 
multiple transmissions from multiple base stations. Soft handoff in CDMA 
communications systems is well known in the art and is described in detail in 
U.S. Patent No. 5,101,501, entitled "Method and system for providing a Soft 
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Handoff in a CDMA Cellular Telephone System", which is assigned to the 
assignee of the present invention. 

[1052] The downlink refers to transmission from the base station to the 
terminal, and the uplink refers to transmission from the terminal to the base 
station. In the exemplary embodiment, some of terminals 106 have multiple 
receive antennas and others have only one receive antenna. In FIG. 2, base 
station 104A transmits data to terminals 106A and 106J on the downlink, base 
station 104B transmits data to terminals 106B and 106J, base station 104C 
transmits data to terminal 106C, and so on. 

[1053] Increasing demand for wireless data transmission and the expansion 
of services available via wireless communication technology have led to the 
development of specific data services. One such service is referred to as High 
Data Rate (HDR). An exemplary HDR service is proposed in "E1A/TIA-IS856 
cdma2000 High Rate Packet Data Air Interface Specification" referred to as "the 
HDR specification." HDR service is generally an overlay to a voice 
communication system that provides an efficient method of transmitting packets 
of data in a wireless communication system. As the amount of data transmitted 
and the number of transmissions increases, the limited bandwidth available for 
radio transmissions becomes a critical resource. There is a need, therefore, for 
an efficient and fair method of scheduling transmissions in a communication 
system that optimizes use of available bandwidth. In the exemplary 
embodiment, system 100 illustrated in FIG. 2 is consistent with a CDMA type 
system having HDR service. 

[1 054] According to one embodiment, the system 1 00 supports a high-speed 
multimedia broadcasting service referred to as High-Speed Broadcast Service 
(HSBS). An example application for HSBS is video streaming of movies, sports 
events, etc. The HSBS service is a packet data service based on the Internet 
Protocol (IP). According to the exemplary embodiment, a service provider 
indicates the availability of such high-speed broadcast service to the users. The 
users desiring the HSBS service subscribe to receive the sen/ice and may 
discover the broadcast service schedule through advertisements. Short 
Management System (SMS), Wireless Application Protocol (WAP), etc. Mobile 
users are referred to as Mobile Stations (MSs). Base Stations (BSs) transmit 
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HSBS related parameters in overhead messages. When an MS desires to 
receive the broadcast session, the MS reads the overhead messages and 
learns the appropriate configurations. The MS then tunes to the frequency 
containing the HSBS channel, and receives the broadcast sen/ice content. 
[1055] The service being considered is a high-speed multimedia 
broadcasting service. This service is referred to as High-Speed Broadcast 
Service (HSBS) in this document. One such example is video streaming of 
movies, sports events, etc. This sen/ice will likely be a packet data service 
based on the Internet Protocol (IP). 

[1056] The service provider will indicate the availability of such high-speed 
broadcast service to the users. The mobile station users who desire such 
service will subscribe to receive this service and may discover the broadcast 
service schedule through advertisements, SMS, WAP, etc. Base stations will 
transmit broadcast service related parameters in overhead messages. The 
mobiles that wish to listen to the broadcast session will read these messages to 
determine the appropriate configurations, tune to the frequency containing the 
high-speed broadcast channel, and start receiving the broadcast service 
content. 

[1057] There are several possible subscription/revenue models for HSBS 
service, including free access, controlled access, and partially controlled 
access. For free access, no subscription is needed by the mobiles to receive 
the service. The BS broadcasts the content without encryption and interested 
mobiles can receive the content. The revenue for the service provider can be 
generated through advertisements that may also be transmitted in the broadcast 
channel. For example, upcoming movie-clips can be transmitted for which the 
studios will pay the sen/ice provider. 

[1058] For controlled access, the MS users subscribe to the service and pay 
the corresponding fee to receive the broadcast service. Users that are not 
subscribed to the service are not able to receive the HSBS service. Controlled 
access can be achieved by encrypting the HSBS transmission/content so that 
only the subscribed users can decrypt the content. This may use over-the-air 
encryption key exchange procedures. This scheme provides strong security 
and prevents theft-of-service. 
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[1059] A hybrid access scheme, referred to as partial controlled access, 
provides the HSBS service as a subscription-based service that is encrypted 
with intermittent unencrypted advertisement transmissions. These 
advertisements may be intended to encourage subscriptions to the encrypted 
HSBS service. Scheduling of such unencrypted segments could be known to 
the MS through external means. 

[1060] A wireless communication system 200 is illustrated in FIG. 3, wherein 
video and audio information is provided to Packetized Data Service Network 
(PDSN) 202 by a Content Server (CS) 201 . The video and audio information 
may be from televised programming or a radio transmission. The information is 
provided as packetized data, such as in IP packets. The PDSN 202 processes 
the IP packets for distribution within an Access Network (AN). As illustrated the 
AN is defined as the portions of the system including a BS 204 in 
communication with multiple MS 206. The PDSN 202 is coupled to the BS 204. 
For HSBS service, the BS 204 receives the stream of information from the 
PDSN 202 and provides the information on a designated channel to subscribers 
within the system 200. To control the access, the content is encrypted by the 
CS 201 before being provided to the PDSN 202. The subscribed users are 
provided with the decryption key so that the IP packets can be decrypted. 
[1061] FIG. 4 details an MS 300, similar to MS 206 of FIG. 3. The MS 300 
has an antenna 302 coupled to receive circuitry 304. The MS 300 receives 
transmissions from a BS (not shown) similar to BS 204 of FIG. 3. The MS 300 
includes a User Identification Module (UIM) 308 and a Mobile Equipment (ME) 
306. The receive circuitry is coupled to the UIM 308 and the ME 306. The UIM 
308 applies verification procedures for security of the HSBS transmission and 
provides various keys to the ME 306. The ME 306 may be coupled to 
processing unit 312. The ME 306 performs substantial processing, including, 
but not limited to, decryption of HSBS content streams. The ME 306 includes a 
memory storage unit, MEM 310. In the exemplary embodiment the data in the 
ME 306 processing unit (not shown) and the data in the ME memory storage 
unit, MEM 310 may be accessed easily by a non-subscriber by the use of 
limited resources, and therefore, the ME 306 is said to be insecure. Any 
information passed to the ME 306 or processed by the ME 306 remains 
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securely secret for only a short amount of time. It is therefore desired that any 
secret information, such as key(s), shared with the ME 306 be changed often. 
[1062] The UIM 308 is trusted to store and process secret information (such 
as encryption keys) that should remain secret for a long time. As the UIM 308 is 
a secure unit, the secrets stored therein do not necessarily require the system 
to change the secret information often. The UIM 308 includes a processing unit 
referred to as a Secure UIM Processing Unit (SUPU) 316 and memory storage 
unit referred to as a Secure UIM Memory Unit (SUMU) 314 that is trusted to be 
secure. Within the UIM 308, SUMU 314 stores secret information in such a 
way as to discourage unauthorized access to the information. If the secret 
information is obtained from the UIM 308, the access will require a significantly 
large amount of resources. Also within the UIM 308, the SUPU 316 performs 
computations on values that may be external to the UIM 308 and/or Internal to 
the UIM 308. The results of the computation may be stored in the SUMU 314 or 
passed to the ME 306. The computations performed with the SUPU 316 can 
only be obtained from the UIM 308 by an entity with significantly large amount of 
resources. Similarly, outputs from the SUPU 316 that are designated to be 
stored within the SUMU 314 (but not output to the ME 306) are designed such 
that unauthorized interception requires significantly large amount of resources. 
In one embodiment, the UIM 308 is a stationary unit within the MS 300. Note 
that in addition to the secure memory and processing within the UIM 308, the 
UIM 308 may also include non-secure memory and processing (not shown) for 
storing information including telephone numbers, e-mail address information, 
web page or URL address information, and/or scheduling functions, etc. 
[1063] Alternate embodiments may provide a removable and/or 
reprogrammable UIM. In the exemplary embodiment, the SUPU 316 does not 
have significant processing power for functions beyond security and key 
procedures, wherein security and key procedures are typically may be used to 
allow encryption of the broadcast content of the HSBS. Alternate embodiments 
may implement a UIM having stronger processing power. 
[1064] The UIM 308 is associated with a particular user and is used primarily 
to verify that the MS 300 is entitled to the privileges afforded the user, such as 
access to the mobile phone network. Therefore, a user is associated with the 
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UIM 308 rather than an MS 300. The same user may be associated with 
multiple UIM 308. 

[1065] The broadcast service faces a problem in determining how to 
distribute keys to subscribed users. To decrypt the broadcast content at a 
particular time, the ME must know the current decryption key. To avoid theft-of- 
service, the decryption key should be changed frequently, for example, one 
service updates the key every minute. These decryption keys are called Short- 
term Keys (SK). The SK is used to decrypt the broadcast content for a short 
amount of time so the SK can be assumed to have some amount of intrinsic 
monetary value for a user. For example, this intrinsic monetary value may be a 
portion of the registration costs. Assume that the cost of a non-subscriber 
obtaining SK from the memory storage unit MEM 310 of a subscriber exceeds 
the intrinsic monetary value of SK. That is, the cost of illegitimately obtaining 
the SK exceeds the reward, resulting in no net benefit. Consequently, the need 
to protect the SK in the memory storage unit MEM 310 is reduced. However, if 
a secret key has a lifetime longer than that of the SK, the cost of illegitimately 
obtaining this secret key may actually be less than the reward. In this situation, 
there is a net benefit in illegitimately obtaining such a key from the memory 
storage unit MEM 310. Hence, ideally the memory storage unit MEM 310 will 
not store secrets with a lifetime longer than that of the SK. 
[1066] The channels used by the CS (not shown) to distribute the SK to the 
various subscriber units are assumed to be insecure. In other words, an 
optimum design will assume the channels are insecure and design the SK 
accordingly. Therefore, when distributing a given SK, the CS desires to use a 
technique that hides the value of the SK from non-subscribed users. 
Furthermore, the CS distributes the SK to each of a potentially large number of 
subscribers for processing in respective MEs within a relatively short timeframe. 
Known secure methods of key transmission are traditionally slow and require 
transmission of a large number of keys. Key transmission methods are 
generally not feasible for the desired combination of security and efficiency 
criteria. The exemplary embodiment is a feasible method of distributing 
decryption keys to a large set of subscribers within a small time-frame in such a 
way that non-subscribers cannot obtain the decryption keys. 
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[1067] The exemplary embodiment is described as transmitting tine 
information in Internet Protocol compatible packets, such as "IPSec" packets as 
described hereinbelow, and therefore, the following description provides a brief 
introduction to terminology used in association with IPSec. This terminology is 
useful for describing exemplary embodiments, but the use of this terminology is 
not meant to limit the exemplary embodiment to communications using IPSec. 
[1068] The foundations of IPSec are specified in RFC 1825 entitled "Security 
Architecture for the Internet Protocol" by R. Atkinson in August 1995, RFC 1826 
entitled "IP Authentication Header by R. Atkinson in August 1995, and RFC 
1827 entitled "IP Encapsulating Security Payload (ESP)" by R. Atkinson in 
August 1995. The authentication header is a mechanism for providing integrity 
to IP datagrams, wherein IP datagrams are generally a collection of useful 
information, referred to as a payload, combined with network control information 
and an IP header. Network routers use the IP header to direct the packet to the 
proper network node. In some circumstances, the authentication header may 
also provide authentication to IP datagrams. ESP is a mechanism for providing 
confidentiality and integrity to IP datagrams, and may be used in conjunction 
with the authentication header. IPSec utilizes "security associations" to 
describe the parameters, such as the encryption key and encryption algorithm, 
used to encrypt and/or authenticate communications between a group of 
entities. Note that the concept of a security association is also valid when 
applied to cryptosystems not based on IPSec. 

[1069] An IPSec packet includes a 32-bit parameter called the Security 
Parameter Index (SPI) that is used, in conjunction with the destination address, 
to identify the security association used to encrypt and/or authenticate the 
contents of the IP datagram. An entity may store the security associations in a 
security association database and index the security associations according to 
the Destination Address and SPI. The encrypted contents of an IPSec packet 
are often called the payload. 

[1070] In the exemplary embodiment, the MS 300 supports HSBS in a 
wireless communication system. To obtain access to HSBS, the user must 
register and then subscribe to the service. Once the subscription is enabled, 
the various keys are updated as required. In the registration process the CS 
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and UIM 308 negotiate a security association, and agree on a Registration Key 
(RK) and otiier parameters required for the security association between tiie 
user and the CS. The CS may then send the UIIVI 308 further secret information 
encrypted with the RK. The RK is kept as a secret in the UIM 308, while other 
parameters may be kept in the ME 306. The RK is unique to a given UIM 308, 
i.e., each user is assigned a different RK. The registration process alone does 
not give the user access to HSBS. 

[1071] As stated hereinabove, after registration the user subscribes to the 
service. In the subscription process the CS sends the UIM 308 the value of a 
common Broadcast Access Key (BAK). Note that while the RK is specific to the 
UIM 308, the BAK is used to encrypt a broadcast message to multiple users. 
The CS sends the MS 300, and specifically UIM 308, the value of BAK 
encrypted using the RK unique to UIM 308. The UIM 308 is able td recover the 
value of the original BAK from the encrypted version using the RK. The BAK, 
along with other parameters, form a security association between the CS and 
the group of subscribed users. The BAK is kept as a secret in the UIM 308, 
while other parameters of the security association may be kept in the ME 306. 
The CS then broadcasts data called SK Information (SKI) that is combined with 
the BAK in the UIM 308 to derive SK. The UIM 308 then passes SK to the ME 
306. In this way, the CS can efficiently distribute new values of SK to the ME of 
subscribed users. Presented hereinbelow are several examples of how SK is 
derived from SKI, and the forms that SKI may take. The registration and 
subscription processes are discussed in detail, after which the SKI and SK are 
described. 

[1072] With respect to registration, when a user registers with a given CS, 
the UIM 308 and the CS (not shown) set-up a security association. That is, the 
UIM 308 and the CS agree on a secret registration key RK. The RK is unique to 
each UlM 308, although if a user has multiple UIMs then these UIMs may share 
the same RK dependent on the policies of the CS. This registration may occur 
when the user subscribes to a broadcast channel offered by the CS or may 
occur prior to subscription. A single CS may offer multiple broadcast channels. 
The CS may choose to associate the user with the same RK for all channels or 
require the user to register for each channel and associate the same user with 
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different RKs on different channels. Multiple CSs may choose to use the same 
registration keys or require the user to register and obtain a different RK for 
each CS. 

[1073] Three common scenarios for setting up this security association 
include: 1) the Authenticated Key Agreement (AKA) method which is used in 
3GPP systems; 2) the Internet Key Exchange (IKE) method as used in IPSec; 
and 3) Over-The-Air-Service-Provisioning (OTASP). In either case the UIM 
memory unit SUMU 314 contains a secret key referred to herein as the A-key. 
For example, using the AKA method, the A-key is a secret known only to the 
UIM and a Trusted Third Party (TTP), wherein the TTP may consist of more 
than one entity. The TTP is typically the mobile service provider with whom the 
user is registered. All communication between the CS and TTP is secure, and 
the CS trusts that the TTP will not assist unauthorized access to the broadcast 
service. When the user registers, the CS informs the TTP that the user wishes 
to register for the service and provides verification of the user's request. The 
TTP uses a function, similar to a cryptographic hash function, to compute the 
RK from the A-key and additional data called Registration Key Information 
(RKI). The TTP passes RK and/or RKl to the CS over a secure channel along 
with other data. The CS sends RKI to the MS 300. The receiver circuitry 304 
passes RKI to the UIM 308 and may pass RKI to the ME 306. The UIM 308 
computes RK from RKI and the A-key that is stored in the UIM memory unit 
SUMU 314. The RK is stored in the UIM memory unit SUMU 314 and is not 
provided directly to the ME 306. Alternate embodiments may use an IKE 
scenario or some other method to establish the RK. The other parameters of 
the security association between the CS and UIM 308 must also be negotiated. 
The RK is kept as a secret in the UIM 308, while other parameters of the 
security association may be kept in the ME 306. In the exemplary embodiment, 
in which BAK is sent to the UIM 308 as an IPSec packet encrypted using RK, 
the CS and MS 300 negotiate a value of SPI used to index the security 
association and this SPI is denoted SPI_RK. 

[1074] In the AKA method, the RK is a secret shared between the CS, UIM 
and TTP. Therefore, as used herein, the AKA method implies that any security 
association between the CS and UIM implicitly includes the TTP. The inclusion 
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of the TTP in any security association is not considered a breacFi of security as 
the CS trusts the TTP not to assist in unauthorized access to the broadcast 
channel. As stated hereinabove, if a key is shared with the ME 306, it is 
desirable to change that key often. This Is due to the risk of a non-subscriber 
accessing Information stored in memory storage unit MEM 310 and thus 
allowing access to a controlled or partially controlled service. The ME 306 
stores SK, i.e., key information used for decrypting broadcast content, In 
memory storage unit MEM 310. The CS sends sufficient information for 
subscribed users to compute SK. If the ME 306 of a subscribed user could 
compute SK from this information, then additional information required to 
compute SK cannot be secret. In this case, assume that the ME 306 of a non- 
subscribed user could also compute SK from this information. Hence, the value 
of SK must be computed in the SUPU 316, using a secret key shared by the CS 
and SUMU 314. The CS and SUMU 314 share the value of RK, however each 
user has a unique value of RK. There is insufficient time for the CS to encrypt 
SK with every value of RK and transmit these encrypted values to each 
subscribed user. 

[1075] With respect to subscription, to ensure the efficient distribution of the 
security information SK, the CS periodically distributes a common Broadcast 
Access Key (BAK) to each subscriber UIM 308. For each subscriber, the CS 
encrypts BAK using the corresponding RK to obtain a value called BAK! 
Information (BAKI). The CS sends the corresponding BAKI to MS 300 of the 
subscribed user. For example, BAK may be transmitted as an IP packet 
encrypted using the RK corresponding to each MS. In the exemplary 
embodiment, BAKI is an IPSec packet containing BAK that is encrypted using 
RK as the key. Since RK is a per-user key, the CS must send the BAK to each 
subscriber individually; thus, the BAK is not sent over the broadcast channel. 
The MS 300 passes the BAKI to the UIM 308. The SUPU 316 computes BAK 
using the value of RK stored in SUMU 314 and the value of BAKI. The value of 
BAK is then stored in the SUMU. In the exemplary embodiment, the BAKI 
contains a SPI value denoted SPLRK that corresponds to the security 
association that contains RK. The MS 300 knows that the UIM 308 can decrypt 
the payload when the IPSec packet is encrypted according to this security 
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association. Consequently, wlien the MS 300 receives an IPSec paci<et 
encrypted according to tliis security association, IVIS 300 passes BAKl to tlie 
DIM 308, and instructs tlie UIIVl 308 to use the RK to decrypt the payload. 
[1 076] The period for updating the BAK is desired to be sufficient to allow the 
CS to send the BAK to each subscriber individually, without incurring significant 
overhead. Since the ME 306 is not trusted to keep secrets for a long time, the 
UIM 308 does not provide the BAK to the ME 306. The other parameters of the 
security association between the CS and group of subscribers must also be 
negotiated. In one embodiment, these parameters are fixed, while in another 
embodiment, these parameters may be sent to the MS as part of the BAKl. 
While the BAK is kept as a secret in the UIM 308, other parameters of the 
security association may be kept in the ME 306. In one embodiment, in which 
SK is sent to the MS 300 as an IPSec packet encrypted using BAK, the CS 
provides the subscribers with an SPI used to index the security association and 
this SPI is denoted SPLBAK. 

[1077] The following paragraph discusses how the SK is updated following a 
successful subscription process. Within each period for updating the BAK, a 
short-term interval is provided during which SK is distributed on a broadcast 
channel. The CS uses a cryptographic function to determine two values SK and 
SKI (SK Information) such that SK can be determined from BAK and SKI. For 
example, SKI may be the encryption of SK using BAK as the key. In one 
exemplary embodiment, SKI is an IPSec packet in which the payload contains 
the value of SK encrypted using BAK as the key. Alternatively, SK may be the 
result of applying a cryptographic hash function to the concatenation of the 
blocks SKI and BAK. The CS ideally ensures that the values of SK cannot be 
predicted in advance. If SK can be predicted in advance, then an attacker, i.e., 
illegitimate accessing entity, can send the predicted values of SK to un- 
subscribed users. 

[1078] As an example, suppose N values of SK are to be used over a 24- 
hour period. If SK is predicted with 100% accuracy, the attacker need only ask 
the UIM to compute the N keys. The attacker then makes the N keys available 
to un-subscribed users. The un-subscribed users can download the keys at the 
beginning of each day and access the HSBS service with little cost or 
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inconvenience. If the attacker is only able to predict SK with 50% accuracy, 
then the attacker needs to send approximately 2N keys. As the accuracy of the 
predictions decreases, the number of keys to be generated by the attacker 
increases. An attacker can be dissuaded from distributing the predictions to SK 
by ensuring that the cost of generating, storing and distributing the predictions 
exceeds the benefit of providing illegitimate access. Attackers may be 
discouraged by ensuring that the accuracy of any prediction by the attacker is 
sufficiently small, thus increasing the number of keys the attacker will generate 
to the point where the cost of providing illegitimate access exceeds the benefit. 
Consequently, any scheme for generating SK ideally ensures that the best 
predictions of an attacker have sufficiently small accuracy. That is, the 
computation of SK should include some random value that can only be 
predicted in advance with small accuracy. 

[1079] In an exemplary embodiment where SK is in an encrypted form, the 
CS can choose SK using a random or pseudo-random function. In alternate 
embodiments, wherein SK is derived by applying a cryptographic function to SKI 
and BAK, the CS introduces an unpredictable value when forming SKI. Some 
portion of SKI may be predictable. For example, a portion of SKI may be 
derived from the system time during which this SKI is valid. This portion, 
denoted SKLPREDICT, may not be transmitted to the MS 300 as part of the 
broadcast service. The remainder of SKI, SKLRANDOM may be unpredictable. 
That is, SK_RANDOM is predicted with small accuracy. The SKLRANDOM is 
transmitted to the MS 300 as part of the broadcast service. The MS 300 
reconstructs SKI from SKLPREDICT and SKLRANDOM and provides SKI to 
DIM 308. The SKI may be reconstructed within the DIM 308. The value of SKI 
changes for each new SK. Thus, either SKLPREDICT and/or SKLRANDOM 
changes when computing a new SK. 

[1080] The CS sends SKLRANDOM to BS for broadcast transmission. The 
BS broadcasts SKLRANDOM, which is detected by the antenna 302 and 
passed to the receive circuitry 304. Receive circuitry 304 provides 
SKLRANDOM to the MS 300, wherein the MS 300 reconstructs SKI. The MS 
300 provides SKI to UIM 308, wherein the UIM 308 obtains the SK using the 
BAK stored in SUMU 314. The SK is then provided by UIM 308 to ME 306. 
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The ME 306 stores the SK in memory storage unit, IVIEM 310. The ME 306 
uses the SK to decrypt broadcast transmissions received from the CS. 
[1081] The CS and BS agree on some criteria for when SKI_RANDOM is to 
be transmitted. The CS may desire to reduce the intrinsic monetary value in 
each SK by changing SK frequently. In this situation, the desire to change 
SKi_RANDOM data is balanced against optimizing available bandwidth. In 
some exemplary embodiments, SKLRANDOM is sent with the encrypted 
content. This allows the MS 300 to generate SK and start decrypting 
Immediately. In many situations, this will waste bandwidth. An exception is a 
scheme in which SKLRANDOM is sent as parameters of the communication. 
For example, the SPI value in IPSec is allowed to vary, and can be exploited to 
include an SKLRANDOM value, as discussed in further detail hereinbelow. 
[1082] In other embodiments, SKLRANDOM is sent separate from the 
encrypted content. The SKLRANDOM may even be transmitted on a channel 
other than the broadcast channel. When a user "tunes" to the broadcast 
channel, the receive circuitry 304 obtains information for locating the broadcast 
channel from a "control channel." It may be desirable to allow quick access 
when a user "tunes" to the broadcast channel. This requires the ME 306 to 
obtain SKI within a short amount of time. The ME 306 may already know 
SKLPREDICT, however, the BS provides SKLRANDOM to ME 300 within this 
short amount of time. For example, the BS may frequently transmit 
SKLRANDOM on the control channel, along with the information for locating 
the broadcast channel, or frequently transmit SKLRANDOM on the broadcast 
channel. The more often that the BS "refreshes" the value of SKLRANDOM, 
the faster the MS 300 can access the broadcast message. The desire to 
refresh SKLRANDOM data is balanced against optimizing available bandwidth, 
as transmitting SK[_RANDOM data too frequently may use an unacceptable 
amount of bandwidth in the control channel or broadcast channel. 
[1083] In some situations the CS may choose to use values of 
SKLPREDICT and SKLRANDOM wherein both change for every value of SK 
produced. In other situations the CS may wish to reduce the number of times 
that SKLRANDOM changes, so that the MS 300 does not have to obtain 
SKLRANDOM so often. For example, if a user changes frequently between 



wo 03/032573 



23 



PCT/US02/32054 



multiple HSBS channels, then It would be better if the value of SKLRANDOM 
were unlikely to change in the five minutes during which the user is tuned to 
another channel. If SKLRANDOM changed then the user would have to wait 
until the new value of SKLRANDOM is broadcast, indicating that such a 
scheme would be more "user-friendly" if SKLRANDOM remains constant for as 
long as possible. The CS may wish to use multiple values of SK during the 
lifetime of an SKLRANDOM value, by using a value for SK1_PREDICT that will 
have changed whenever the CS wishes to change SK. One example uses 
system time; however, using system time introduces additional problems 
regarding synchronization. 

[1 084] With respect to encryption and transmission of the broadcast content, 
the CS encrypts the broadcast content using the current SK. The exemplary 
embodiment employs an encryption algorithm such as the Advanced Encryption 
Standard (AES) Cipher Algorithm. In the exemplary embodiment, the encrypted 
content is then transported by an IPsec packet according to the Encapsulating 
Security Payload (ESP) transport mode discussed hereinbelow. The iPsec 
packet also contains an SPI value that instructs the ME 306 to use the current 
SK to decrypt received broadcast content. The encrypted content is sent via the 
broadcast channel. 

[1085] Receive circuitry 304 provides the RKI and BAKI directly to the UIM 
308. Further, If the CS computes SK from SKLRANDOM and SKLPREDICT 
values, then receive circuitry 304 provides the SKLRANDOM to an appropriate 
part of the MS 300 where it is combined with SKLPREDICT to obtain SKI. In 
one embodiment, SKI is attached to the encrypted message, and is extracted by 
the ME 306. The SKI is provided to the UIM 308 by the relevant part of the MS 
300. The UIM 308 computes RK from the RKI and A-key, decrypts the BAKI 
using the RK to obtain BAK, and computes the SK using the SKI and BAK, to 
generate an SK for use by the ME 306. The ME 306 decrypts the broadcast 
content using the SK. The UIM 308 of the exemplary embodiment may not be 
sufficiently powerful for decryption of broadcast content in real time, and, 
therefore, SK is passed to the ME 306 for decrypting the broadcast. 
[1086] FIG. 58 illustrates the transmission and processing of keys, including 
RK, BAK and SK, according to an exemplary embodiment. As illustrated, at 
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registration, the MS 300 receives the RK Information (RKI) and passes it to UliVl 
308, wherein the SUPU 316 computes RK using RKI and the A-l<ey, and stores 
the RK in UIM memory storage SUMU 314. The MS 300 periodically receives 
the BAK Information (BAKI) that contains BAK encrypted using the RK value 
specific to UIM 308. The encrypted BAKI is decrypted by SUPU 316 to recover 
the BAK, which is stored in UIM memory storage SUMU 314. The MS 300 
further periodically obtains SKI. In some exemplary embodiments, the MS 300 
receives an SKLRANDOM that it combines with SKLPREDICT to form SKI. 
The SUPU 31 6 computes SK from SKI and BAK. The SK is provided to ME 306 
for decrypting broadcast content. 

[1087] In the exemplary embodiment the CS keys are not necessarily 
encrypted and transmitted to the MSs; the CS may use an alternative method. 
The key information generated by the CS for transmission to each MS provides 
sufficient information for the MS to calculate the key. As illustrated in the 
system 350 of FIG. 6, the RK is generated by the CS, but RK Information (RKI) 
is transmitted to the MS. The CS sends information sufficient for the UIM to 
derive the RK, wherein a predetermined function is used to derive the RK from 
transmitted information from the CS'. The RKI cohtainslsufficreht'inform'atibli" for 
the MS to determine the original RK from the A-key and other values, such as 
system time, using a predetermined public function labeled d1, wherein: 

RK = d1 (A-key, RKI). (3) 
[1088] In the exemplary embodiment, the function d1 defines a 
cryptographic-type function. According to one embodiment, RK is determined 
as: 

RK = SHA'(A-key II RKI ), (4) 
wherein "H" denotes the concatenation of the blocks containing A-key and RKI, 
and SHA'(X) denotes the last 128-bits of output of the Secure Hash Algorithm 
SHA-1 given the input X. In an alternative embodiment, RK is detemnined as: 

RK = AES(A-key,RKI), (5) 
wherein AES(X,Y) denotes the encryption of the 128-bit block RKI using the 
128-bit A-key. In a further embodiment based on the AKA protocol, RK is 
determined as the output of the 3GPP key generation function f3, wherein RKI 
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includes the value of RAND and appropriate values of AMF and SQN as defined 
by the standard. 

[1089] The BAK is treated in a different manner because multiple users 
having different values of RK must compute the same value of BAK. The CS 
may use any technique to determine BAK. However, the value of BAKI 
associated with a particular DIM 308 must be the encryption of BAK under the 
unique RK associated with that UIM 308. The SUPU 316 decrypts BAKI using 
RK stored In the SUMU 314 according to the function labeled d2, according to: 

BAK = d2(BAKI, RK). (6) 
[1090] In an alternate embodiment, the CS may compute BAKI by applying 
a decryption process to BAK using RK, and the SUPU 316 obtains BAK by 
applying the encryption process to BAKI using RK. This is considered 
equivalent to the CS encrypting BAK and the SUPU 316 decrypting BAKI. 
Alternate embodiments may implement any number of key combinations in 
addition to or in place of those illustrated in FIG. 6. 

[1091] The SK is treated in a similar manner to RK. In some embodiments, 
SKI is first derived from the SKI_PRED1CT and SKLRANDOM, wherein 
SKLRANDOM"' is""the~'ihforrriation transmitted from CS to MS. Then a 
predetermined function labeled d3 is used to derive the SK from SKI and BAK 
(stored in the SUMU 314), according to: 

SK = d3(BAK, SKI). (7) 
[1092] In one embodiment, the function d3 defines a cryptographic-type 
function. In an exemplary embodiment, SK is computed as: 

SK = SHA( BAK II SKI ), (8) 
while in another embodiment, SK is computed as 

SK = AES( BAK, SKI ). (9) 
[1093] A method of providing the security for a broadcast message is 
illustrated in FIGs. 7A-7D. FIG. 7A illustrates a registration process 400 
wherein a subscriber negotiates registration with the CS at step 402. The 
registration at step 404 provides the UIM a unique RK. The UIM stores the RK 
in a Secure Memory Unit (SUMU) at step 406. FIG. 7B illustrates subscription 
processing 420 between a CS and a MS. At step 422 the CS generates a BAK 
for a BAK time period T1 . The BAK is valid throughout the BAK time period T1 , 
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wherein the BAK is periodically updated. At step 424 the CS authorizes the 
UIIVI to have access to the Broadcast Content (BC) during the BAK timer period 
T1 . At step 426 the CS encrypts the BAK using each individual RK for each 
subscriber. The encrypted BAK is referred to as the BAKI. The CS then 
transmits the BAKI to the UIM at step 428. The UIM receives the BAKI and 
performs decryption using the RK at step 430. The decrypted BAKI results in 
the originally generated BAK. The UIM stores the BAK in a SUMU at step 432. 
[1094] When the user subscribes to the broadcast service for a particular 
BAK update period, the CS sends the appropriate information BAKI, wherein 
BAKI corresponds to the BAK encrypted with the RK. This typically occurs prior 
to the beginning of this BAK update period or when the MS first tunes to the 
broadcast channel during this BAK update period. This may be initiated by the 
MS or CS according to a variety of criteria. Multiple BAKI may be transmitted 
and decrypted simultaneously. 

[1095] Note that when expiration of the BAK update period is imminent, the 
MS may request the updated BAK from the CS if the MS has subscribed for the 
next BAK update period. In an alternate embodiment the first timer t1 is used 
by the CS, where upon expiration of the timer, i.e., satisfaction of the BAK 
update period, the CS transmits the BAK. The CS may change the value of 
BAK earlier than originally intended. This may be desirable if, for example, the 
current value of BAK is publicly disclosed. 

[1096] Note that it is possible for a user to receive a BAK during a BAK 
update period, wherein, for example, a subscriber joins the service mid-month 
when the BAK updates are performed monthly. Additionally, the time periods 
for BAK and SK updates may be synchronized, such that all subscribers are 
updated at a given time. 

[1097] FIG. 8A illustrates the registration process in a wireless 
communication system 500 according to the exemplary embodiment. The CS 
502 negotiates with each subscriber, i.e., MS 512, to generate a specific RK to 
each of the subscribers. The RK is provided to the SUMU unit within the UIM of 
each MS. As illustrated, the CS 502 generates RKi that is stored in SUMUi 510 
within UIMi 512. Similarly, the CS 502 generates RKg and RKn which are 
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Stored in SUMUa 520 within UllVla 522 and SUMUn 530 within UIMn 532, 
respectively. 

[1098] FIG. 8B illustrates the subscription process in the system 500. The 
CS 502 further Includes multiple encoders 504. Each of the encoders 504 
receives one of the unique RKs and the BAK value generated in the CS 502. 
The output of each encoder 504 is a BAKI encoded specifically for a subscriber. 
The BAKI is received at the UIM of each MS, such as UIMi 512. Each UIM 
includes a SUPU and a SUMU, such as SUPUi 514 and SUMUi 510 of UIMi 
512. The SUPU includes a decoder, such as decoder 516 that recovers the 
BAK by application of the RK of the UIM. The process is repeated at each 
subscriber. 

[1099] FIG. 8D illustrates the processing of BC after registration and 
subscription. The CS 502 includes an encoder 560 that encodes the BC using 
the current SK to generate the EBC. The EBC is then transmitted to the 
subscribers. Each MS includes an encoder, such as encoder 544, that extracts 
the BC from the EBC using the SK. 

[11 00] The following description considers four exemplary embodiments that 
may be~u~sed'to~up"date SK and broadcast "the'content. In the first exemplary 
embodiment, SK is derived from BAK and the SRI value in the header of the 
IPSec packets containing the broadcast content. In the second exemplary 
embodiment, SK is derived from BAK, a broadcast random value denoted 
RAND and the SPI value in the header of the IPSec packets containing the 
broadcast content. In the third exemplary embodiment, SK is derived from BAK, 
system time and a broadcast random value denoted SK_RAND. In the fourth 
exemplary embodiment, SK is sent as an IPSec packet encrypted using BAK. 
Still further embodiments may provide SK as a combination of the above listed 
embodiments, or using another mechanism to provide the SK to the MS often 
enough to discourage unauthorized access to the broadcast service. 
[1101] As the Short-term Key (SK) is used to encrypt and decrypt the 
broadcast content, and is stored in memory that may be vulnerable to 
unauthorized access, wherein the SK is typically changed frequently. A 
problem exists as to how to change the SK frequently while balancing the 
following four objectives: 1) to minimize the SK update waiting time or blackout 



wo 03/032573 



28 



PCT/US02/32054 



period, for a mobile station that has recently tuned to the broadcast; 2) to 
minimize the amount of bandwidth used to update the SK value; 3) to increase 
the level of security; and 4) to increase the ease with which the SK can be 
incorporated with IPSec. Frequent updates may reduce the blackout period but 
at the expense of requiring more bandwidth to send frequent updates. 
[1102] One solution provides a method for providing sufficient information for 
performing SK updates in each encrypted broadcast content packet without 
using any additional bandwidth. Therefore, the blackout period may be 
minimized without necessarily incurring additional bandwidth requirements. The 
four exemplary embodiments described herein for performing an SK update 
have various advantages and disadvantages. All four embodiments provide 
methods that are sufficiently secure. The first embodiment eliminates the block 
out period and uses no additional bandwidth to update the SK value. The other 
embodiments may incur a blackout period during times of high usage. The first 
embodiment is also easily incorporated with IPSec. 

[1103] According to the first embodiment for performing an SK update, the 
above mentioned problems are solved by defining the SK that encrypts a given 
IPSecpacRet as a function of the Broadcast "Access Key (BAK) and the SPI in 
the ESP header. In this way, rather than providing the SK in a separate stream, 
the SK is computed from the content stream. Assuming that the MS has 
already received the BAK as described hereinabove, the MS is able to 
immediately compute the SK for each content packet without having to wait for 
some additional SK update information. This effectively eliminates any SK 
update wait time for a new broadcast recipient. As soon as the MS receives a 
content packet, the MS can immediately determine the SK and decrypt the 
content. 

[1104] Information sufficient to calculate the SK at the MS is provided in the 
IPSec packet. The IPSec packet utilizes an IP Encapsulating Security Payload 
(ESP) and Is specified in RFC 1827 entitled "IP Encapsulating Security Payload 
(ESP)" by R. Atkinson in August 1995, as mentioned above herein. ESP is a 
mechanism for providing integrity and confidentiality to IP datagrams. In some 
circumstances it can also provide authentication to IP datagrams. FIG. 9A 
illustrates an IPSec packet 600, including an IP header 602, an ESP header 
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604, and a payload 606, according to one embodiment. The Encapsulating 
Security Payload (ESP) may appear anywhere after the IP header and before 
the final transport-layer protocol. Generally, the ESP consists of an 
unencrypted header followed by encrypted data. 

[1105] The ESP header field 604 includes a Security Association Identifier, 
referred to as the SPI. According to the first embodiment described 
hereinabove, the IPSec packets containing the broadcast content include an 
SPI related to the SK, labeled SPLSK. FIG. 9B illustrates the format of the 
corresponding 32-bit SPLSK 610. The SPLSK 610 is decomposed into two 
parts: SPLRAND 612 and BAKJD 614. The SPLRAND 612 is a random 
number that is statistically random, and is also used to compute the SK that is 
used to encrypt and decrypt the corresponding broadcast content or payload. 
The SPLRAND parameter allows the Content Sen/er (CS) to frequently change 
the effective SK value for the content by changing the SPLRAND value, thus 
providing the MS the parameter needed to compute the SK value immediately. 
Furthermore, SPLRAND fulfills the role of SKLRANDOM, discussed 
hereinabove. The randomness of SPLRAND ensures that an attacker cannot 
predict the values of SK with high accuracy. Since the SPI is- already a 
standard parameter in IPSec encrypted packets, i.e., is specified for the ESP, 
the present embodiment does not incur the additional bandwidth typically 
associated with transmitting the SK as a separate stream. The BAKJD 
indicates which BAK value to use for computation of the SK value. In one 
embodiment the BAKJD is a four bit tag, wherein each tag is associated with a 
BAK value. When the MS performs a subscription, the MS stores each received 
BAKJD and the corresponding BAK value in a memory storage unit. According 
to one embodiment the MS includes a Look Up Table (LUT) for storing the BAK 
value(s) identified with each corresponding BAKJD(s). The BAK LUT is 
contained in the secure memory in the UIM. 

[1106] FIG. 9D illustrates a BAK LUT 630. Each entry in the LUT 630 
identifies the BAKJD, the corresponding BAK value, and the expiration of the 
validity of the combination. The expiration is introduced due to the small 
number of values of BAKJD. Alternate embodiments may avoid the use of 
expiration values in the BAK LUT. In one embodiment, only 16 values of 
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BAKJD are used. If a new BAK is issued every montii, tlien the value of 
BAKJD must repeat after 16 montiis. At that time, there may be confusion as 
to which value of BAK Is valid. The expiration provides a time-out period after 
which a new entry replaces the expired entry. The BAK LUT may need to store 
more than one value of BAK. One reason for this Is that the CS may wish to 
send BAK values to the MS before they become valid. Additionally, the CS 
may wish to have multiple BAK values that are valid at the same time, wherein 
different BAK values may be used to compute different SK values. If the BAK 
LUT does not contain a current BAK corresponding to the BAKJD, then the MS 
may perform a subscription to retrieve the valid BAK. 

[1107] After extracting SPLRAND and BAK_ID from the SPI_SK, and 
retrieving BAK corresponding to BAKJD, the DIM computes the value of SK 
from BAK and SPLRAND using a cryptographic function g: 

SK = g( BAK, SPLRAND). (1 0) 

[1108] In one embodiment, the function g( BAK, SPLRAND) corresponds to 
encryption of SPLRAND padded to 128-bit bits with zeroes, using the AES 
encryption algorithm with BAK as the key: 

SK = AES( BAK, SPLRAND). (11) 
[1109] In another embodiment, the function g( BAK, SPLRAND) 
corresponds to computing the 128 least significant bits of the output of SHA-1 
applied to the concatenation of BAK and SPLRAND: 

SK = SHA( BAK, SPLRAND). (12) 
[1110] In this way, it is not necessary for the DIM to compute the value of SK 
for each packet received by the MS. The MS stores each of the SPI_SK values 
with the corresponding SK values in a memory storage unit, such as a Look Up 
Table (LUT). The MS may store the SPLSK and SK values as a security 
association in the Security Association Database (SAD): an LUT in which the 
MS stores typical security associations required for other applications. The 
security associations are indexed according to the destination address and SPI. 
When a new SK is generated from a new value of SPLSK, the old security 
association is replaced by the new security association containing the new 
values of SPLSK and SK. Alternatively, the MS may store the SPLSK and SK 
values in a SK_LUT, with one SK_LUT allocated to each broadcast channel. 
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FIG. 9C illustrates an SK LUT 620. Each entry in the LUT 620 identifies the 
SPLSK and the corresponding SK value. When the MS receives a broadcast 
content packet, the ME first checks the SAD or SK LUT to see if the table 
contains an SPLSK value equal to the SPI of the received packet. If the table 
contains such a value, then the ME uses this value, othenwise the UIM 
computes the new value of SK. The CS may also have a BAK LUT, SAD or 
SK_LUT. 

[1111] FIGs. 10 and 11 illustrate one embodiment for performing an SK 
update. FIG. 10 illustrates method 700 of operation of the CS. For each IP 
packet, the CS determines the BAK that will be used to derive SK, and 
determines the BAKJD corresponding to the BAK at step 702. The BAKJD 
may be any type of identifier that allows discrimination among multiple BAK 
values. The CS sends BAK and the BAKJD to individual users by performing 
subscription at step 706. The users may perform subscription at various times 
before and during the subscription period. Steps 702 and 706 may occur 
before the subscription period starts. At step 710 the CS chooses a random 
value for the SPLRAND value. If the BAKJD is represented using b bits, then 
the' SPIlRAND is represented using (32-b)~ bits. The SPLRAND value should 
not be repeated during the lifetime of one BAK. Once the SPLRAND and 
BAK_ID are known, the CS combines them (i.e., concatenates BAKJD to the 
SPLRAND) to form the SPLSK at step 712. At step 714, the CS forms SK by 
using a cryptographic function to combine SPLRAND with the BAK 
corresponding to BAKJD to form SK. The CS then encrypts the broadcast 
message or portion of the message with SK at step 716, and sends the 
encrypted message at step 71 8. Note that the encrypted broadcast message is 
part of an IP packet that includes the IP header and the ESP header. The ESP 
header includes the SPLSK. At decision diamond 720, the CS decides whether 
to change SK. If the CS decides not to change SK, then the CS proceeds to 
step 716. If the CS decides to change SK, then the CS proceeds to decision 
diamond 724, where the CS decides whether to change BAK. If the CS decides 
not to change BAK, then the CS proceeds to step 710. If the CS decides to 
change BAK, then the CS proceeds to step 702. 
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[1112] FIG. 11 illustrates the corresponding operation at the receiver, such 
as a MS. The method 750 initiates when the receiver receives the IP packet 
including the SPLSK in the ESP header at step 752. Note that the receiver 
extracts the SPI_SK information from the IP packet. Upon receipt of the 
SPLSK, the receiver first checks if the SK corresponding to the received 
SPLSK value is stored in memory. 

[1113] In one embodiment, the SPLSK is stored in an SK LUT stored in the 
ME 306 unit of FIG. 4 and in another embodiment, the SPLSK is stored in the 
security association database: both of these tables are denoted in FIG. 11 by 
SPI table. The check of the SPI table is performed at decision diamond 754. If 
the SK value is stored in memory at the receiver, the receiver is able to decrypt 
the payload of the content packet using the stored SK value at step 756. If the 
receiver does not have the SK value stored in memory, the receiver extracts 
BAK_ID and SPLRAND from SPLSK at step 758. At Step 760, the receiver 
then checks if the BAK LUT has a valid BAK entry corresponding to BAKJD. If 
the BAK LUT does have a valid BAK corresponding to BAKJD, then the 
receiver selects this value and proceeds to step 764. If the BAK LUT does not 
have a valid BAK corresponding to BAKJD, such as when the user wishes to 
subscribe for this period, then the receiver performs a subscription to obtain the 
valid BAK as shown at step 762. The new BAK is stored with BAK_ID in the 
BAK_LUT and the receiver proceeds to step 764. The receiver combines the 
BAK corresponding to the BAK_ID value, i.e., BAKJD in the received SPLSK, 
and the SPLRAND value (also in the received SPLSK) to compute the new SK 
at step 764. The receiver then uses the new SK value to decrypt the payload of 
the content packet at step 766. The receiver also stores this SK value indexed 
by the corresponding SPI_SK and possibly the destination address of the IPSec 
packets. 

[1114] The SK is computed directly from knowledge of the BAK and the 
SPLSK value in the content packet. The BAK changes less frequently than the 
SK, e.g., BAK may change once a month. Therefore, the receiver is able to 
determine the SK value immediately from the content packets without additional 
delay and without requiring more bandwidth to send the SK update. 
[1115] According to one embodiment, the SK calculation is given as: 
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SK=/(SPI_SK, BAK), (13) 
wherein the function is defined as encryption of the SPI_SK using the BAK. 
As the SPI_SK is made up of the SPI_RAND and the BAKJD, Equation (13) 
may also be given as: 

SK=f(SPI_RAND, BAKJD). (14) 
[1116] The second exemplary embodiment for performing an SK update 
introduces an additional aspect of randomness to the computation of SK, 
wherein SK is defined as a function of BAK, SPLRAND, and an additional 
parameter, RAND. The RAND parameter is kept constant for several SK 
values. The RAND allows more different values of SK to be derived from a 
single BAK value by changing both SPLRAND and RAND. If no RAND is used 
then there are at most 2^^ values of SK that can be derived from a single BAK 
by varying the SPI. However, if a 96-bit RAND is used, then there can be up to 
2^^^ values of SK that can be derived from a single BAK by varying both 
SPLRAND and RAND. (These numbers do not account for bits of the SPI that 
are used to represent BAKJD). Now, rather than the SPLSK identifying only 
the BAK, the SPI_SK must also contain information to identify the RAND. To 
implement the RAND value, the SPLSK is forrhulated in three parts: TJlhe 
BAKJD to identify the BAK value to use; 2) the RAND_ID to identify the RAND 
value to use; and 3) the SPLRAND value to provide the frequently changing 
randomness in the SPLSK. 

[1117] FIG. 12A illustrates an SPLSK 800 portion of an IP packet, including 
an SPLRAND 802, a BAKJD 804, and a RANDJD 806. The SPLRAND 802 
and BAKJD 804 are as described hereinabove. To maintain the SPI_SK to a 
predetermined or specified bit length, the SPLRAND 802 may use fewer bits 
than SPLRAND 612 as in FIG. 9B to allow bits for the RANDJD 806. The 
RANDJD 806 corresponds to the RAND value used for calculation of the SK, 
and may be a four bit tag or other identifier. The RANDJD(s) and 
corresponding RAND value(s) are stored in a LUT at the receiver. FIG. 12B 
illustrates a RAND LUT 820. The RAND LUT 820 includes an entry for each 
RAND value listing the RAND_ID and expiration associated with the RAND 
value. 
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[1118] FIG. 13 illustrates operation of the CS. For each IP packet, the 
transmitter determines the BAK that will be used to derive SK, and determines 
the BAK_ID corresponding to the BAK at step 902. The BAKJD may be any 
type of identifier that allows discrimination among multiple BAK values. The CS 
sends BAK and the BAKJD to individual users by performing subscription at 
step 904. The users may perform subscription at various times before and 
during the subscription period. Steps 902 and 904 may occur before the 
subscription period starts. At step 906 the transmitter selects a RAND value 
and determines the corresponding RAND_ID. The CS may send RAND and 
RANDJD to the MS individually or send RAND and RANDJD to be broadcast 
on the broadcast channel. The value of RAND does not need to be secret, so it 
is not encrypted. If RAND and RANDJD are broadcast, then there should not 
be much time between re-transmission so that an MS does not need to wait 
long before obtaining the RAND value. Broadcasting RAND and RANDJD will 
use a large amount of bandwidth over time. However, if there are a large 
number of users tuned to the channel, then a large amount of bandwidth will be 
required to send RAND to each user individually. Consequently, RAND and 
RANDJD^ should onfy be broadcast if there are a large number of users tuned 
to the channel. At step 910 the CS chooses a random value of SPI_RAND. 
[1119] Once the SPI_RAND, BAKJD and RANDJD are known, the 
transmitter combines them (e.g., concatenates RAND_ID and BAKJD to the 
SPLRAND) to form the SPLSK at step 912. The CS uses a cryptographic 
function to combine SPLRAND, BAK (identified by BAKJD) and RAND 
(identified by RANDJD) to form SK. The CS then encrypts the broadcast 
message or portion of the message with SK at step 916, and transmits the 
encrypted message at step 918. Note that the encrypted broadcast message is 
part of an IF packet that includes the IP header and the ESP header. The ESP 
header includes the SPLSK. At decision diamond 920, the CS decides whether 
to change SK. If the CS decides not to change SK, then the CS proceeds to 
step 916. If the CS decides to change SK, then the CS proceeds to decision 
diamond 922, where the CS decides whether to change RAND. If the CS 
decides not to change RAND, then the CS proceeds to step 910. If the CS 
decides to change RAND, then the CS proceeds to decision diamond 924, 
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where the CS decides whether to change BAK. If the CS decides not to change 
BAK, then the CS proceeds to step 906. If the CS decides to change BAK, then 
the CS returns to step 902. 

[1120] FIG. 14 illustrates the corresponding operation at the receiver, such 
as a MS. The method 950 initiates when the receiver receives the IP packet 
including the SPLSK in the ESP header at step 952. Note that the receiver 
extracts the SPLSK infomnation from the IP packet. Upon receipt of the 
SPLSK, the receiver first checks if the SK corresponding to the received 
SPLSK value is stored in memory at decision diamond 952. In one 
embodiment, the SPI_SK is stored in an SK LUT is stored in the ME unit 306 of 
FIG. 4, and in another embodiment, the SPLSK is stored in the security 
association database: both of these tables are denoted in FIG. 14 as the SPI 
table. The check of the SK LUT is performed at decision diamond 954. If the 
SK value is stored in memory at the receiver, the receiver is able to decrypt the 
payload of the content packet using the stored SK value at step 956. If the 
receiver does not have the SK value stored in memory, the receiver extracts 
BAK_ID and SPLRAND from SPLSK at step 958. At step 960, the receiver 
then checks if the BAK LUT has a valid BAK entry corresponding to BAK_ID. If 
the BAK LUT does have a valid RAND corresponding to BAKJD, then the 
receiver selects this value and proceeds to step 964. If the BAK LUT does not 
have a valid BAK corresponding to BAK_ID, then (provided the user wishes to 
subscribe for this period) the receiver performs a subscription to obtain the valid 
BAK as shown in step 962. The new BAK is stored with BAK_ID in the 
BAK_LUT and receiver proceeds to step 864. At step 964, the receiver then 
checks if the RAND LUT has a valid RAND entry corresponding to RAND_ID. If 
the RAND LUT does have a valid BAK corresponding to RANDJD, then the 
receiver selects this value and proceeds to step 964. If the RAND LUT does not 
have a valid RAND corresponding to RAND_iD, then the receiver obtains RAND 
and RANDJD either by requesting the value from the CS or from the broadcast 
as shown in step 966. The new RAND is stored with RANDJD in the 
RAND_LUT and the receiver proceeds to step 968. The receiver combines the 
BAK corresponding to the BAKJD value (i.e., BAK_ID in the received SPLSK), 
the RAND corresponding to the RANDJD (i.e., RANDJD in the received 
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SPLSK) and the SPLRAND value (also in the received SPLSK) to compute 
the new SK at step 968. The receiver then uses the new SK value to decrypt 
the payload of the content packet at step 970. The receiver also stores this SK 
value indexed by the corresponding SPI_SK and possibly the destination 
address of the IPSec packets. 

[1121] The RAND is changed less frequently than SPLRAND. The RAND 
value is common to all mobile stations listening to the broadcast. Therefore, the 
RAND value may be broadcast to all mobile stations and is not necessarily 
encrypted specifically per receiver. Therefore, if there are enough mobile 
stations listening to the broadcast stream, it is more efficient for the air interface 
to broadcast the RAND value a few times to all these mobile stations rather than 
require each mobile station to individually request the RAND values from the 
CS. 

[1 122] According to one embodiment, the SK calculation is given as: 

SK=f(SPI_SK, BAK, RAND), (15) 

wherein the function is defined as encryption of the SPLSK using the BAK. 

As the SPLSK is made up of the SPLRAND, the BAK_ID, and the RAND_ID, 

Equation (15) may also be given as: 

SK=/(SPLRAND, BAKJD, RANDJD, RAND). (16) 

[1123] Note that the use of a RAND value may introduce some "blackout 
periods" because the receiver needs to receive the RAND value on a change. 
However, these periods are less frequent than when the SK is updated on a 
separate stream and the receiver waits for the periodic updates. The RAND is 
designed to change more slowly than the SK value, and therefore, the updates 
to the RAND are not sent as frequently. The CS would also like to reduce the 
probability of a "blackout" resulting when an MS stops listening to the channel 
due to a lost signal, tuning to another channel, or responding to an interruption, 
such as a phone call. The blackout is most likely to occur at the beginning of 
the lifetime of a RAND value. To counter this, the CS may re-broadcast the new 
RAND more frequently around the time when the new RAND value becomes 
valid. At the end of the lifetime of a RAND, it may become necessary to 
broadcast both the value of the current RAND and the value of the next RAND. 
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The values of RAND should not be predictable, and the CS should begin 
sending RAND only a short time before RAND becomes valid. 
[1124] As discussed hereinabove, according to the third exemplary 
embodiment, SK is derived from BAK, system time and a broadcast random 
value denoted SK_RAND. FIG. 7C illustrates a method of updating keys for 
security encryption in a wireless communication system supporting broadcast 
service. The method 440 implements time periods as given in FIG. 7E. The 
BAK is updated periodically having a time period T1 . A timer t1 is initiated when 
BAK is calculated and times out at T1 . A variable is used for calculating the SK 
referred to as SK_RAND, which is updated periodically having a time period T2. 
A timer t2 is initiated when the SK_RAND is generated and times out at T2. In 
one embodiment, the SK is further updated periodically having a period of T3. 
A timer t3 is initiated when each SK is generated and time out at time T3. The 
SK_RAND is generated at the CS and provided periodically to the MS. The MS 
and the OS use SK_RAND to generate the SK, as detailed hereinbelow. 
[1125] A first timer t1 is reset when the applicable value of BAK is updated. 
The length of time between two BAK updates is the BAK update period. In the 
exemplary embodiment the BAK update period is a month, however, alternate 
embodiments may implement any time period desired for optimum operation of 
the system, or to satisfy a variety of system criteria. 

[1126] Continuing with FIG. 7C, the method 440 initializes the timer t2 at 
step 442 to start the SK_REG time period T2. The CS generates SK_RAND 
and provides the value to transmit circuitry for transmission throughout the 
system at step 444. The timer t3 is initialized at step 446 to start the SK time 
period T3. The CS then encrypts the BC using the current SK at step 448. The 
encrypted product is the EBC, wherein the CS provides the BBC to transmit 
circuitry for transmission in the system. If the timer t2 has expired at decision 
diamond 450, processing returns to step 442. While t2 is less than T2, if the 
timer t3 has expired at decision diamond 452, processing returns to step 446, 
else processing returns to 450. 

[1127] FIG. 7D illustrates the operation of the MS accessing a broadcast 
service. The method 460 first synchronizes the timers t2 and t3 with the values 
at the CS at step 462. The UIM of the MS receives the SK_RAND generated by 
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the CS at step 464. At step 466 the UIM generates the SK using the 
SK_RAND, BAK, and a time measurement. The U\M passes the SK to the IVIE 
of the MS. The DIM then decrypts the received EBC using the SK to extract the 
original BC at step 468. When the timer t2 expires at step 470 processing 
returns to step 462. While the timer t2 is less than T2, if the timer tS expires at 
step 472, the timer tS is initialized at step 474 and returns to 466. 
[1128] Key management and updates are illustrated in FIG. 8C, wherein the 
CS applies a function 508 to generate a value of SK_RAND, which is an interim 
value used by the CS and MS to calculate SK. Specifically, the function 508 
applies the BAK value, the SK_RAND and a time factor. While the embodiment 
illustrated in FIG. 8C applies a timer to determine when to update the SK, 
alternate embodiments may use alternate measures to provide periodic 
updates, for example occurrence of an error or other event. The CS provides 
the SK_RAND value to each of the subscribers, wherein a function 518 resident 
in each UIM applies the same function as in function 508 of the CS. The 
function 518 operates on the SK_RAND, BAK and a timer value to generate a 
SK that is stored in a memory location in the ME, such as MEMi 542 of MEi 
540. 

[1129] As discussed hereinabove, according to the fourth exemplary 
embodiment, SK is encrypted using BAK to form SKI, and SKI is sent to the MS. 
In one exemplary embodiment, SK is sent in an IPSec packet encrypted using 
BAK. The CS may also broadcast a corresponding SPI that can be used to 
identify data that is encrypted using SK. This embodiment does not need to be 
discussed in any more detail. 

[1130] In the exemplary embodiments provided hereinabove, the CS may 
choose to update SK as the CS desires. The more often the SK changes, the 
more the CS can dissuade attackers from distributing SK values. There will be 
times when an attacker considers the benefit of distributing SK values to be 
better than at other times. This will be primarily due to the nature of the content 
being broadcast. For example, on occurrence of an important event, un- 
subscribed users will be more interested in receiving news on HSBS, and 
therefore, will be willing to pay more for illegitimate access than at other times. 
At these times, the CS may increase the cost and inconvenience to the attacker 
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and un-subscribed users by changing SK more often than normal. The CS 
must keep in mind, however, the limits to the processing power of the DIM. If 
the CS changes SK too often, then the UIM will be unable to compute the SK 
values In real time, so the users will be unable to decrypt the content in real- 
time. 

[1 131] Those of skill in the art would understand that information and signals 
may be represented using any of a variety of different technologies and 
techniques. For example, data, instructions, commands, information, signals, 
bits, symbols, and chips that may be referenced throughout the above 
description may be represented by voltages, currents, electromagnetic waves, 
magnetic fields or particles, optical fields or particles, or any combination 
thereof. 

[1132] Those of skill would further appreciate that the various illustrative 
logical blocks, modules, circuits, and algorithm steps described in connection 
with the embodiments disclosed herein may be implemented as electronic 
hardware, computer software, or combinations of both. To clearly illustrate this 
interchangeability of hardware and software, various illustrative components, 
blocks, modules, circuits, and steps have been described above generally in 
terms of their functionality. Whether such functionality is implemented as 
hardware or software depends upon the particular application and design 
constraints imposed on the overall system. Skilled artisans may implement the 
described functionality in varying ways for each particular application, but such 
implementation decisions should riot be interpreted as causing a departure from 
the scope of the present invention. 

[1133] The various illustrative logical blocks, modules, and circuits described 
in connection with the embodiments disclosed herein may be implemented or 
performed with a general purpose processor, a digital signal processor (DSP), 
an application specific integrated circuit (ASIC), a field programmable gate array 
(FPGA) or other programmable logic device, discrete gate or transistor logic, 
discrete hardware components, or any combination thereof designed to perform 
the functions described herein. A general purpose processor may be a 
microprocessor, but in the alternative, the processor may be any conventional 
processor, controller, microcontroller, or state machine. A processor may also 
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be implemented as a combination of computing devices, e.g., a combination of 
a DSP and a microprocessor, a plurality of microprocessors, one or more 
microprocessors in conjunction with a DSP core, or any other such 
configuration. 

[1134] The steps of a method or algorithm described in connection with the 
embodiments disclosed herein may be embodied directly in hardware, in a 
software module executed by a processor, or in a combination of the two. A 
software module may reside in RAM memory, flash memory, ROM memory, 
EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a 
CD-ROM, or any other form of storage medium known in the art. An exemplary 
storage medium is coupled to the processor such the processor can read 
information from, and write information to, the storage medium. In the 
alternative, the storage medium may be integral to the processor. The 
processor and the storage medium may reside in an ASIC. The ASIC may 
reside in a user terminal. In the alternative, the processor and the storage 
medium may reside as discrete components in a user terminal. 
[1135] The previous description of the disclosed embodiments is provided to 
enable any person skilled in the art to make or use the present invention. 
Various modifications to these embodiments will be readily apparent to those 
skilled in the art, and the generic principles defined herein may be applied to 
other embodiments without departing from the spirit or scope of the invention. 
Thus, the present invention is not intended to be limited to the embodiments 
shown herein but is to be accorded the widest scope consistent with the 
principles and novel features disclosed herein. 



[1 136] WHAT IS CLAIMED IS: 
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CLAIMS 

1 . A method for secure transmissions, the method comprising: 

2 determining a short term key for a message for transmission, the short 

term key having a short term key identifier; 
4 determining an access key for the message, the access key having an 

access key identifier; 
6 encrypting the message with the access key; 

forming an Internet protocol header comprising the short term key 
8 identifier; and 

transmitting the encrypted message with the Internet protocol header. 

2. The method as in claim 1 , wherein the short term key identifier comprises 
2 the access key identifier. 

3. The method as in claim 2, wherein short term key identifier further 
2 comprises a security parameter index value. 

4. The method as in claim 3, wherein the security parameter index value is 
2 a random number. 

5. The method as in claim 1 , wherein the short term key is calculated as a 
2 function of the short term key identifier and the access key. 

6. The method as in claim 5, wherein the short term key identifier is 
2 calculated by encrypting the short term key identifier with the access key. 

7. The method as in claim 1 , wherein the Internet protocol header is part of 
2 an ESP header. 
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8. The method as in claim 7, wherein the Intemet protocol header further 
2 comprises a second random number, the second random number having a 

random number identifier. 

9. The method as In claim 8, wherein the short term key identifier comprises 
2 the access key identifier and the random number Identifier. 

10. The method as in claim 9, wherein short term key identifier further 
2 comprises a security parameter Index value. 

1 1 . The method as in claim 10, wherein the security parameter index value is 
2 a random number. 

12. The method as in claim 8, wherein the short term key is calculated as a 
2 function of the short term key identifier, the second random number, and the 

access key. 

13. The method as in claim 12, wherein the short term key identifier is 
2 calculated by encrypting the short term key identifier and the second random 

number with the access key. 

1 4. A method for secure reception of a transmission, the method comprising: 
2 receiving a short term key identifier specific to a transmission, the short 

term key identifier corresponding to a short term key; 
4 determining an access key based on the short term key identifier; 

encrypting the short term key identifier with the access key to recover the 
6 short term key; and 

decrypting the transmission using the short term key. 

15. The method as in claim 14, further comprising: 

2 storing the short term key identifier and short term key in a memory 

storage unit. 
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16. The method as in claim 14, wherein the short term key identifier is 
2 comprised of a random number and an access l<ey identifier associated with the 

access l<ey. 

17. The method as in claim 14, wherein encrypting the short term key 
2 identifier further comprises encrypting the short term key identifier and a random 

number with the access key to recover the short term key. 

18. In a wireless communication system supporting a broadcast service 
2 option, an infrastructure element comprising: 

a receive circuitry; 

4 a user identification unit, operative to recover a short-time key for 

decrypting a broadcast message, comprising: 
6 processing unit operative to decrypt key information; and 

a mobile equipment unit adapted to apply the short-time key for 
8 decrypting the broadcast message, comprising: 

memory storage unit for storing a plurality of short term keys 
1 0 and short term key identifiers. 

19. The infrastructure element as in claim 15, wherein the user identification 
2 unit further comprises a second memory storage unit for storing a plurality of 

access keys and access key identifiers. 

20. The infrastructure element as in claim 15, wherein the memory storage 
2 unit is a secure memory storage unit. 

21. An infrastructure element for a wireless communication system, 
2 comprising: 

means for receiving a short term key identifier specific to a transmission, 
4 the short term key identifier corresponding to a short term key; 

means for determining an access key based on the short term key 
6 identifier; 
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means for encrypting the short term key identifier with the access l<ey to 
8 recover the short term key; and 

means for decrypting the transmission using the short term key. 

22. A digital signal storage device, comprising: 

2 first set of instructions for receiving a short term key identifier specific to a 

transmission, the short term key identifier corresponding to a short 
4 term key; 

second set of instructions for determining an access key based on the 
6 short term key identifier; 

third set of instructions for encrypting the short term key identifier with the 
8 access key to recover the short term key; and 

fourth set of instructions for decrypting the transmission using the short 
1 0 term key. 

23. A communication signal transmitted on a carrier wave, comprising: 

2 a first portion corresponding to a short term key identifier, the short term 

key identifier having a corresponding short term key; and 

4 a second portion corresponding to a transmission payload encrypted 

using the short term key. 

24. The communication signal as in claim 23, wherein the short term key 
2 identifier comprises: 

a random number portion; and 
4 an access key identifier corresponding to an access key. 
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